Ask HN: How Safe Is ACH?

Lots of merchants are pushing ACH. I am worried that it seems like anyone can authorize a payment with my routing number and account number which is on every check I've ever given out.

Also my bank says ACH transactions essentially stay authorized until they are explicitly stopped in writing. Which if I understand right means these vendors can make future withdrawals.